Vectra AI Inc. > Case Studies > GMMH NHS Foundation Trust stops attacks with Cognito for Office 365

GMMH NHS Foundation Trust stops attacks with Cognito for Office 365

Vectra AI Inc. Logo
Company Size
1,000+
Region
  • Europe
Country
  • United Kingdom
Product
  • Cognito for Office 365
  • Cognito platform
Tech Stack
  • AI-derived machine learning algorithms
  • Azure Active Directory
Implementation Scale
  • Enterprise-wide Deployment
Technology Category
  • Cybersecurity & Privacy - Cloud Security
Applicable Industries
  • Healthcare & Hospitals
Applicable Functions
  • Business Operation
Use Cases
  • Cybersecurity
Services
  • System Integration
About The Customer
Greater Manchester Mental Health NHS Foundation Trust is a healthcare provider based in North West England. The trust has about 5,400 employees and operates from more than 140 locations. It provides mental health services for 53,000 patients a year. The trust uses Microsoft Office 365, which has more than 200 million monthly users, increasing the chance that cyber hygiene will fall by the wayside. The trust was looking for a solution that could provide automated threat detection to reveal hidden attacks and full network visibility.
The Challenge
Greater Manchester Mental Health NHS Foundation Trust, a healthcare provider in North West England, was facing a significant challenge with limited visibility into malicious behaviors inside network traffic or Office 365. The trust has about 5,400 employees, more than 140 locations, and provides mental health services for 53,00 patients a year. The sheer quantity of individuals using the service increases the chance that cyber hygiene will fall by the wayside, and knowledgeable attackers will exploit human behavior to gain high-privilege access to critical business-data. Despite antivirus software, a LogPoint SIEM and next-generation firewalls, network detection and response (NDR) had been on the radar for quite some time.
The Solution
The trust chose to implement the Cognito platform from Vectra, including Cognito for Office 365. This solution ingests activity logs from multiple services like Office 365, Azure Active Directory, SharePoint, OneDrive and Exchange. With a deep understanding of Office 365 application semantics, Vectra applies AI-derived machine learning algorithms to proactively detect and respond to hidden cyberattackers before damage or theft occurs. Vectra analyzes events like logins, file creation and manipulation, data leakage protection configuration, and mailbox routing configuration and automation changes. It exposes attacker behavior patterns. Detections are correlated to accounts and prioritized based on risk, giving security professionals a complete attack narrative to respond and mitigate threats quickly.
Operational Impact
  • Visibility into threat behaviors across entire network
  • Confidence to detect and stop credential abuse that is common in Office 365
  • Ability to be proactive rather than reactive, providing more time to work with their end-user community

Case Study missing?

Start adding your own!

Register with your work email and create a new case study profile for your business.

Add New Record

Related Case Studies.

Contact us

Let's talk!
* Required
* Required
* Required
* Invalid email address
By submitting this form, you agree that IoT ONE may contact you with insights and marketing messaging.
No thanks, I don't want to receive any marketing emails from IoT ONE.
Submit

Thank you for your message!
We will contact you soon.